Kubescape + servasec
Kubernetes security scanner that scans clusters, YAML files, and Helm charts for misconfigurations.
What is Kubescape?
Kubescape is a Kubernetes security scanner by ARMO that scans clusters, YAML manifests, and Helm charts for misconfigurations. It uses frameworks like NSA, MITRE ATT&CK, and custom policies to assess your Kubernetes security posture. Kubescape provides risk scoring and remediation guidance for Kubernetes resources.
NSA and MITRE ATT&CK frameworksCluster, YAML, and Helm chart scanningRisk scoring per resourceCustom policy supportGitHub and CLI integration
Integrate Kubescape with servasec
1
Install Kubescape
Install Kubescape via the official script.
curl -s https://raw.githubusercontent.com/kubescape/kubescape/master/install.sh | bash
2
Scan your cluster
Run Kubescape against your Kubernetes cluster.
kubescape scan --format json --output results.json
3
Push to servasec
Send the results to servasec.
curl -X POST "$SSC_PUBLIC_URL/api/ingest" \ -H "X-Api-Token: $API_TOKEN" \ -F "[email protected]"
What servasec adds to Kubescape
Multi-framework view
Track NSA and MITRE compliance alongside application security.
Resource-level tracking
Track Kubernetes resource security through their lifecycle.
Cross-tool correlation
See Kubernetes misconfigurations alongside container and code findings.